New T-Mobile Breach Affects 37 Million Accounts
Summary: T-Mobile disclosed in a January 19, 2023 SEC filing that a bad actor abused an API to harvest data on roughly 37 million current postpaid and prepaid customer accounts, including names, billing addresses, emails, phone numbers, dates of birth, account numbers, and line and plan details. T-Mobile said it learned of the incident on Jan. 5, 2023, and that the abuse began around Nov. 25, 2022, with no payment card data, passwords, Social Security numbers, or government ID numbers exposed.
Key Takeaway: This is T-Mobile's second major exposure in as many years, after the August 2021 breach affecting more than 40 million people that led to a $500 million class action settlement, and the company told the SEC it does not expect a material impact on operations given nearly $20 billion in third-quarter 2022 revenue alone.
Read the original at Krebs on Security ↗
- Topics
- Data Breaches
- Related
- TSMC employee data breach linked to cloud provider Cyber Risks · Nov 15, 2026Data Breach at La Poste Subsidiary Maileva Affects 22 Million People in France Cyber Risks · Nov 15, 2026City of Osaka warns of data breach impacting 1 million as Japan reels from dozens of cyber incidents Cyber Risks · Nov 13, 2026